CVE-2026-49169Patch(microsoft / windows_server_2025)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft windows_server_2025 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in DNS Server allows an authorized attacker to execute code over a network.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_server_2025

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-07-14); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
Products
windows_server_2025

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-07-14: 1Mentions · 2026-07-17: 1Mentions · 2026-07-21: 1Patch / Workaround · 2026-07-14: 1Technical Details · 2026-07-14: 107-1407-1707-21
Signal classification3 categories
Patch
133.3%
Disclosure
133.3%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-07-141
Patch1
2026-07-171
Disclosure1
2026-07-211
General1
Full discourse3 posts
  • 日本レジストリサービス(JPRS)@JPRS_official
    Disclosure

    【注意喚起】Windows DNSの脆弱性情報が公開されました(CVE-2026-49169、他7件) https://jprs.jp/tech/security/2026-07-17-windows.html

    Post summary

    The notice announces newly published Windows DNS vulnerability information, including CVE-2026-49169 and seven other CVEs.

    01090641
    1.3K followersView on X
  • 日本レジストリサービス(JPRS)@JPRS_official
    General

    【メールマガジン(FROM JPRS)】最新号を掲載しました。 通常号 vol.1254 「Windows DNSの脆弱性情報が公開されました(CVE-2026-49169、他7件)」など https://jprs.jp/mail/backnumber/2026/260721.html

    Post summary

    Newsletter announcing the publication of a Windows DNS vulnerability list that includes CVE-2026-49169, without providing technical details, exploitation evidence, or mitigation steps.

    00040306
    1.3K followersView on X
  • Windows Forum@windowsforum
    Patch

    🪟 Windows Server 2025 DNS has a use-after-free RCE. Patch CVE-2026-49169 now—because letting your DNS server become an attacker’s remote-control toy is a terrible uptime strategy. https://windowsforum.com/threads/cve-2026-49169-patch-windows-server-2025-dns-rce.438168/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #WindowsServer2025 #PatchManagement #DnsSecurity #CveVulnerabilities https://t.co/t1qFF6Y8Yi

    Post summary

    The post announces a use-after-free remote code execution flaw in Windows Server 2025 DNS and urges users to apply the newly released patch CVE‑2026‑49169; no PoC, exploit code, or active exploitation claims are provided.

    0000049
    1.2K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_server_2025---

Explore more